An Undersea Royal Road: Exploring Malicious Documents and Associated Malware - DomainTools | Start Here. Know Now.
Tags
country: Australia Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Datasets Direct Execution Guardrails - T1480 Execution Guardrails - T1627 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Rundll32 - T1218.011 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 8d81cc7b-8edd-4043-a3d8-3ee29271da16
Fingerprint fccd885b0a3fcfc0
Analysis status DONE
Considered CTI value 2
Text language
Published April 22, 2021, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 19, 2024, 7:01 p.m.
Headline An Undersea Royal Road: Exploring Malicious Documents and Associated Malware
Title An Undersea Royal Road: Exploring Malicious Documents and Associated Malware - DomainTools | Start Here. Know Now.
Detected Hints/Tags/Attributes 67/3/12
Source URLs
Redirection Url
Details Source https://www.domaintools.com/resources/blog/an-undersea-royal-road-exploring-malicious-documents-and-associated-malware
Details Source https://www.domaintools.com/resources/blog/an-undersea-royal-road-exploring-malicious-documents-and-associated-malware/
URL Provider
Details Provider Source level domain
Details domaintools.com www.domaintools.com
Attributes
Details Type #Events CTI Value
Details Domain 246 
mail.ru
Details File 1024 
rundll32.exe
Details File 1 
перспектива_a.rtf
Details md5 1 
027f5ae272bbb6bbc3e1fdf230a4e3f6
Details md5 1 
70da6872b6b2da9ddc94d14b02302917
Details sha1 1 
57142832e5453cb0e2c3e6c1a3d7536131b3ed72
Details sha1 1 
b2da45913353bfc66d189455f9ad80ef26968143
Details sha256 1 
774a54300223b421854d2e90bcf75ae25df75ba9f3da1b9eb01138301cdd258f
Details sha256 1 
2d705f0b76f24a18e08163db2f187140ee9f03e43697a9ea0d840c829692d43c
Details sha256 1 
b60c9b59e03101277196bce597701eab5cfb0fd6b37442a5029673a11ffb9295
Details sha256 1 
aec6271de4436ddf0067e67c389cbddb82f73d749e4713f5c8b375ad0ee7da9c
Details IPv4 3 
45.63.27.162